URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-08-05 06:56:13 | 13.248.169.48 | a904c694c05102f30.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | yes |
| 2025-08-05 06:56:13 | 76.223.54.146 | a904c694c05102f30.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | yes |
| 2025-09-05 18:56:13 | 166.117.110.61 | Not listed | AS16509 AMAZON-02 | US | no | |
| 2025-09-05 18:56:13 | 99.83.161.153 | a2b7bf3398455f345.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2018-07-16 10:18:45 | 198.211.105.200 | Not listed | AS14061 DIGITALOCEAN-ASN | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2018-08-11 07:14:25 | http://beta.telibrahma.com/newsletter/En_us/Inv... | Offline | heodo | |
| 2018-08-10 12:26:05 | http://beta.telibrahma.com/newsletter/En_us/Inv... | Offline | doc emotet | |
| 2018-08-09 05:14:36 | http://beta.telibrahma.com/Download/CSOB9934063... | Offline | doc emotet | |
| 2018-08-08 07:31:19 | http://beta.telibrahma.com/Download/CSOB9934063... | Offline | doc emotet | Anonymous |
| 2018-08-01 16:10:28 | http://beta.telibrahma.com/Aug2018/EN_en/Addres... | Offline | doc emotet | |
| 2018-07-16 10:18:45 | http://beta.telibrahma.com/newsletter/Rechnungs... | Offline | doc emotet | Anonymous |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2018-08-11 11:13:47 | 403fdb65274fbfeccb8868e0b400f3ee2281426c7dbbdc7bdb263dff0979d704 | doc | Heodo | |
| 2018-08-11 11:05:35 | 403fdb65274fbfeccb8868e0b400f3ee2281426c7dbbdc7bdb263dff0979d704 | doc | Heodo | |
| 2018-08-01 20:41:13 | ddfa667a6805bf8b9216feb8df15b1590c340914d7142aa142ecb858d117ba9b | doc | Heodo | |
| 2018-08-01 16:10:28 | 207f084b0cc2eb26c4a7c680a886e3f9bd65f45eed695d504743d6bbaafa9856 | doc | Heodo | |
| 2018-07-18 04:31:40 | e7db2087ef7f0f80640c7f62a493da43eadb8db5f5af90ef1cb55e68a465696a | doc | Heodo |
US